Momentum Consultings — 6 Place du Capitole, 31000 Toulouse, France
Momentum Consultings ("we", "us", "our") is committed to protecting your personal data when you interact with momentumconsultings.com. This Privacy Policy explains what information we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable French data protection legislation (Loi Informatique et Libertés, as amended by Ordonnance n° 2018-1125).
Momentum Consultings, 6 Place du Capitole, 31000 Toulouse, France. For all privacy enquiries: hello@momentumconsultings.com. We commit to responding within 30 calendar days as mandated by GDPR Article 12.
Contact information: When you fill out a form, subscribe to communications, or complete a purchase, we collect your name, email address, telephone number, country of residence, company name, and any project details you voluntarily provide. This information is necessary to deliver our consulting services and communicate with you about your engagement.
Engagement materials: During consulting engagements, you may share financial data, strategic plans, customer information, organisational charts, and other confidential business information. All such materials are protected under mutual non-disclosure obligations and treated with the highest level of confidentiality.
Payment data: All payment processing is handled by Stripe Inc., a PCI DSS Level 1 certified payment processor. Momentum Consultings never sees, stores, or has access to your full credit card number, CVV code, or banking credentials. Stripe processes your payment information in accordance with their own privacy policy.
Website usage data: We collect anonymised usage data including truncated IP address, browser type and version, operating system, pages visited, time spent on each page, and referral source. This data is collected via Google Analytics (with IP anonymisation enabled) and is used solely to understand how visitors interact with our website so we can improve the user experience.
We process your personal data for the following purposes: (a) delivering the consulting services you have purchased or enquired about; (b) processing payments securely via our payment processor; (c) communicating with you about engagement progress, deliverables, and scheduling; (d) improving our website functionality, content, and user experience; (e) complying with French and European Union legal obligations including tax reporting, accounting, and anti-money laundering requirements; (f) responding to your enquiries and providing customer support; and (g) sending relevant business communications when you have given consent.
Contract performance (Art. 6(1)(b)): Processing necessary to deliver consulting services you have purchased. Legitimate interest (Art. 6(1)(f)): Processing necessary for website improvement and communication about relevant services. Consent (Art. 6(1)(a)): Marketing communications — you may withdraw consent at any time by clicking unsubscribe or emailing us. Legal obligation (Art. 6(1)(c)): Processing required to comply with French tax law, accounting regulations, and anti-fraud requirements.
We never sell, rent, trade, or otherwise commercially exploit your personal data. We share data only with the following categories of data processors, each operating under GDPR-compliant data processing agreements: Stripe Inc. (payment processing), our web hosting provider (website infrastructure within the EU), and Google Analytics (anonymised website analytics). We may also be required to disclose data to French public authorities (including CNIL, the French tax administration, and judicial authorities) when legally compelled to do so.
Contact data: retained for 3 years after your last interaction with us, after which it is permanently deleted. Engagement materials: retained for 2 years following engagement completion (or as otherwise specified in the engagement NDA), then permanently deleted. Payment transaction records: retained for 10 years as required by French commercial law (Code de commerce, Article L123-22) and French tax law. Website analytics data: anonymised and aggregated after 26 months, after which individual-level data is no longer identifiable.
Under the General Data Protection Regulation, you have the following rights regarding your personal data: the right to access your data (Article 15); the right to rectify inaccurate data (Article 16); the right to request erasure of your data (Article 17, commonly known as the "right to be forgotten"); the right to restrict processing of your data (Article 18); the right to receive your data in a structured, commonly used, machine-readable format (Article 20, data portability); and the right to object to processing based on legitimate interest or for direct marketing purposes (Article 21). To exercise any of these rights, email hello@momentumconsultings.com with your request. We will respond within 30 calendar days. You also have the right to lodge a complaint with the French national data protection authority: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
We implement appropriate technical and organisational security measures to protect your personal data: TLS/SSL encryption across all website pages; two-factor authentication on all internal systems; role-based access controls on a strict need-to-know basis; encrypted backups stored in EU-based data centres; mandatory confidentiality agreements for all team members; regular security audits and vulnerability assessments; and client engagement materials stored in isolated, encrypted environments with access logging.
Your personal data is primarily stored and processed within the European Economic Area (EEA). Where data is transferred outside the EEA (for example, to Stripe Inc. in the United States for payment processing), such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection.
For comprehensive information about the cookies we use and how to manage your preferences, please refer to our dedicated Cookie Policy.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated via email to existing clients and prominently announced on this page. We encourage you to review this page periodically. Last updated: March 2026.